Privacy Policy

Effective November 13, 2026

Rotary is an outbound calling product run by Active Margin Group LLC, a Maryland limited liability company ("Active Margin Group", "we", "us"). This policy explains what information we collect when you use rotary.so, app.rotary.so and mcp.rotary.so (together, "Rotary"), what we do with it, and the choices you have.

Questions about this policy go to hello@rotary.so.

Two kinds of information

Rotary holds two kinds of information, and we treat them differently.

Your account information is about you, the person who signs up. We decide how it is used, as described in this policy.
Your customer data is what you put into Rotary to do your work: the contacts you add or import, your scripts and campaigns, your call history, call recordings and notes. It belongs to you. We store and process it only to run Rotary for you, and you are responsible for having the right to collect and use it.

If you are someone a Rotary customer called, that customer decides how your information is used. Contact them first. If you can't reach them, write to us and we will pass your request on.

What we collect

Account information. Your name, email address and password (stored as a hash, never in plain text), the organization you create or join, your role in it, and your profile picture if you upload one.

Customer data. Contacts and the fields you record about them, including names, companies, phone numbers, email addresses and notes. Scripts and campaigns. For each call: the numbers involved, when it started and ended, how long it lasted, the outcome and notes you saved, and a recording of every answered call.

Phone numbers and carrier records. The phone numbers you buy through Rotary and the carrier account we set up for your organization.

Connected AI agents. When you connect an AI agent to Rotary, we record which app you connected, when, and what you allowed it to do. The agent can then read and change your customer data on your behalf until you disconnect it.

Billing information. If you buy a paid plan, our payment processor collects your payment details. We receive a record of the plan and its status, not your full card number.

Technical information. Log records of requests to Rotary, including IP address, browser type, the pages and actions requested and when. We use cookies that are needed to keep you signed in and to remember your language and theme. We do not use advertising cookies.

Messages you send us. Whatever you include when you write to us.

How we use it

To provide Rotary: sign you in, store your data, place and record your calls, and show you their history.
To send service email, such as verification links, password resets, invitations and notices about your account.
To keep Rotary secure, prevent abuse and fix problems.
To bill you, if you are on a paid plan.
To meet legal obligations and enforce our terms.

We do not sell your information or your customer data, and we do not use your customer data or call recordings to train AI models.

Call recordings

Rotary records every answered call and keeps the recording with the call. Only signed-in members of your organization can play it. You are responsible for telling the people you call that they are being recorded, and for getting their consent, wherever the law requires it. Recording laws differ from state to state.

Who we share it with

We share information only with the companies that help us run Rotary, and only as far as each one needs:

Google Cloud hosts Rotary and its database, in the United States.
Twilio provides phone numbers and carries and records calls.
Resend delivers our email.
Our payment processor handles payments for paid plans.

AI agents you connect receive the customer data they ask for through the access you approved. An agent's provider handles that data under its own terms and privacy policy, not ours.

We may also disclose information when the law requires it, to protect the rights and safety of our customers, the public or Active Margin Group, or as part of a merger, sale or reorganization of the business. In that last case this policy continues to apply to information already collected.

How long we keep it

We keep your account information and customer data for as long as your account is open. When you delete data or close your account, we delete it from our active systems within 30 days. Copies in backups are removed as those backups expire. We may keep records longer where the law requires it, such as billing records.

Your choices

See and change your data. You can view and edit your contacts and change your account details in the app. Write to us if you want a copy of your data.
Disconnect an agent. You can remove a connected app at any time under Settings, then Security.
Delete your account. Write to us and we will close your account and delete its data.
Ask us. You can ask what information we hold about you, ask for a copy, or ask us to correct or delete it. Depending on where you live, the law may give you these rights. We answer every request, and we will not treat you differently for making one.

Security

Connections to Rotary are encrypted. Carrier credentials are stored encrypted, recordings are kept in private storage, and each organization's data is kept separate from every other's. No system is perfectly secure. If we learn of a breach that affects your information, we will tell you as the law requires.

Where it is processed

Rotary is run from the United States, and information is stored and processed there. Rotary is built for calling United States phone numbers.

Children

Rotary is for businesses and is not directed to children. You must be at least 18 to use it. We do not knowingly collect information from children under 13.

Changes to this policy

When we change this policy we will post the new version here and update the date at the top. If a change is significant, we will tell you by email or in the app before it takes effect.

Contact

Active Margin Group LLC hello@rotary.so